Staff Network Risk & Compliance Engineer

Northrop Grumman Corp.

Roy (UT)

On-site

USD 153,000 - 229,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Medical, Dental & Vision coverage

401k

Educational Assistance

Life Insurance

Employee Assistance Programs & Work/Li

Paid Time Off

Health & Wellness Resources

Employee Discounts

Job summary

Northrop Grumman in Roy, Utah is seeking a Staff Systems Engineer to lead Network Risk & Compliance for the Sentinel program. You will drive RMF compliance, write security plans, and coordinate UT/ATOs while interfacing with multiple teams across the program.

Requires a TS clearance, strong DoD network experience, and ability to produce secure network documentation and artifacts for program-wide use.

Qualifications

Bachelors in STEM with 12+ years of experience or equivalent with advanced degree.
US Citizenship with active DoD Top Secret clearance.
Familiarity with FISMA and DFARS regulatory mandates.
4+ years of security assessments and STIG compliance.
2+ years developing network documentation such as security plans.
2+ years coordinating/preparing ATOs or SSAAs.
2+ years implementing RMF for networks.
CISSP, GSEC, or DoD Cybersecurity Certification (CDP).
6+ years designing, architecting, and deploying complex networks.
2+ years MBSE tools experience (SysML/UML)
4+ years handling requirements: authoring, tracing, allocating.
3+ years program execution and milestone delivery.
5+ years cross-IPT collaboration experience.
4+ years in DoD-related network/security domains.

Responsibilities

Drive networking Risks, Issues, and Opportunities (RIOs) and IRTs.
Implement the RMF across the program network.
Track RMF tasks and close findings before MPE.
Ensure network changes meet RMF and regulatory mandates.
Coordinate Authority to Operate (ATO) for program networks.
Write Security Plans (SSP); manage STIG and SAR closure.
Prepare System Security Authorization Agreement (SSAA).
Provide networking compliance SME inputs program-wide.
Coordinate with other network development teams; participate in working groups.
Create and maintain network documentation; document processes/procedures as needed.